mailing list archives
Re: CERT Vendor-Initiated Bulletin VB-98.04 - xterm.Xaw
From: alan () LXORGUK UKUU ORG UK (Alan Cox)
Date: Fri, 1 May 1998 17:44:05 +0100
impression that with the decision to make X commercial, they disavowed
older versions of X. Security and patches for older versions of X
should now fall into the responsibility to those parties who maintain
Indeed - which means they lied to CERT when they told CERT everyone
affected had the patches or CERT screwed up in releasing the report.
If CERT were working by their own (at times ridiculous) rules they would
have informed XFree86 and sat on the announcement until they had patches.
Maybe the CERT guys would like to tell bugtraq what happened ?